silvercover
Posts: 26
|
| Posted: 09/16/2007, 8:01 AM |
|
Hi,
What are your security advises to prevent brute force ( or similar) attacks?
Specially for login forms.
Thanks in advance.
_________________
The more I learn, the less I know! |
 |
 |
rho
Posts: 85
|
| Posted: 09/16/2007, 9:06 AM |
|
Simply disable/block the login for a specific account after a number of failed logins. This minimizes the chances of a successful brute force attack.
In the event of a brute force attack, this will block a lot of accounts (which will have to be enabled again), but at least your site will be safe for possible mis-use.
|
|
|
|
silvercover
Posts: 26
|
| Posted: 09/16/2007, 12:59 PM |
|
I know we can block inputs for few minutes, but that's not user friendly. In case of blocking we should think about a way to just block inputs for certain IP or account like yahoo or other sites.
Thank you.
_________________
The more I learn, the less I know! |
|
|
|
|
